make the fetchStats route visible to the client as well

On the latest source build, if I click on the API token link in the admin stats tab, I get a 404 page. If, however, I directly load the URL, or even if I refresh the 404 page, then I get the desired data. I think there's some weird Meteor magic going on here. Everything appears to work as intended if I make the route definition visible to the client, as in this patch.